Merge pull request #3520 from crazy-max/bin-image-github-builder

ci: use docker github builder to build bin image and binaries

hack/hash-files

@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-
-set -eu -o pipefail
-
-: "${DESTDIR=./bin/release}"
-
-if [ ! -d "$DESTDIR" ]; then
-  exit 0
-fi
-
-# checksums
-(
-  cd ${DESTDIR}
-  sha256sum -b buildx-* > ./checksums.txt
-  sed -i '/darwin/d' ./checksums.txt
-  sha256sum -c --strict checksums.txt
-)

hack/release

@@ -1,57 +0,0 @@
-#!/usr/bin/env bash
-
-set -eu -o pipefail
-
-: "${GITHUB_ACTIONS=}"
-: "${GITHUB_REPOSITORY=}"
-: "${GITHUB_RUN_ID=}"
-
-: "${BUILDX_CMD=docker buildx}"
-: "${DESTDIR=./bin/release}"
-: "${CACHE_FROM=}"
-: "${CACHE_TO=}"
-: "${PLATFORMS=}"
-
-if [ -n "$CACHE_FROM" ]; then
-  for cfrom in $CACHE_FROM; do
-    setFlags+=(--set "*.cache-from=$cfrom")
-  done
-fi
-if [ -n "$CACHE_TO" ]; then
-  for cto in $CACHE_TO; do
-    setFlags+=(--set "*.cache-to=$cto")
-  done
-fi
-if [ -n "$PLATFORMS" ]; then
-  setFlags+=(--set "*.platform=$PLATFORMS")
-fi
-if ${BUILDX_CMD} build --help 2>&1 | grep -- '--attest' >/dev/null; then
-  prvattrs="mode=max"
-  if [ "$GITHUB_ACTIONS" = "true" ]; then
-    prvattrs="$prvattrs,builder-id=https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"
-  fi
-  setFlags+=(--set "*.attest=type=sbom")
-  setFlags+=(--set "*.attest=type=provenance,$prvattrs")
-fi
-
-output=$(mktemp -d -t buildx-output.XXXXXXXXXX)
-
-(
-  set -x
-  ${BUILDX_CMD} bake "${setFlags[@]}" --set "*.args.BUILDKIT_MULTI_PLATFORM=true" --set "*.output=$output" release
-)
-
-for pdir in "${output}"/*/; do
-  (
-    cd "$pdir"
-    binname=$(find . -name 'buildx-*')
-    filename=$(basename "${binname%.exe}")
-    mv "provenance.json" "${filename}.provenance.json"
-    mv "sbom-binaries.spdx.json" "${filename}.sbom.json"
-    find . -name 'sbom*.json' -exec rm {} \;
-  )
-done
-
-mkdir -p "$DESTDIR"
-mv "$output"/**/* "$DESTDIR/"
-rm -rf "$output"